* IPSec
@ 2003-01-10 22:45 latten
2003-01-11 0:21 ` IPSec James Morris
0 siblings, 1 reply; 4+ messages in thread
From: latten @ 2003-01-10 22:45 UTC (permalink / raw)
To: linux-kernel
I am configuring IPSec and was wondering are there
any plans to add AES to the crypto algorithms IPSec uses?
Joy
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: IPSec
2003-01-10 22:45 IPSec latten
@ 2003-01-11 0:21 ` James Morris
0 siblings, 0 replies; 4+ messages in thread
From: James Morris @ 2003-01-11 0:21 UTC (permalink / raw)
To: latten; +Cc: linux-kernel
On Fri, 10 Jan 2003 latten@austin.ibm.com wrote:
> I am configuring IPSec and was wondering are there
> any plans to add AES to the crypto algorithms IPSec uses?
AES CBC is supported with 2.5.56 (specify 'rijndael-cbc' for setkey).
AES counter mode is not yet supported.
Also, for those wanting to use Blowfish, you'll need the patch below
against iputils-ss021109-try.
- James
--
James Morris
<jmorris@intercode.com.au>
diff -urN -X dontdif iputils/include-glibc/net/pfkeyv2.h iputils.w1/include-glibc/net/pfkeyv2.h
--- iputils/include-glibc/net/pfkeyv2.h Sat Nov 9 13:45:52 2002
+++ iputils.w1/include-glibc/net/pfkeyv2.h Sat Jan 11 11:19:45 2003
@@ -17,7 +17,7 @@
/* private allocations - based on RFC2407/IANA assignment */
#define SADB_X_EALG_CAST128CBC 5 /*6*/
-#define SADB_X_EALG_BLOWFISHCBC 4 /*7*/
+#define SADB_X_EALG_BLOWFISHCBC 7
#define SADB_X_EALG_RIJNDAELCBC 12
#define SADB_X_EALG_AES 12
^ permalink raw reply [flat|nested] 4+ messages in thread
* IPSEC
@ 2003-07-08 12:40 Nico Schottelius
2003-07-08 22:19 ` IPSEC Dax Kelson
0 siblings, 1 reply; 4+ messages in thread
From: Nico Schottelius @ 2003-07-08 12:40 UTC (permalink / raw)
To: Linux Kernel Mailing List
[-- Attachment #1: Type: text/plain, Size: 593 bytes --]
Hello!
I opened an overview about Linux IPSec implementations at
http://linux.schottelius.org/ipsec/
I would like to add recent kernel changes in IPSec to the site.
So it would be very nice if someone could forward
latest IPSec news to nico-ipsec@schottelius.org..do you think this is possible?
Greetings,
Nico
PS: please CC me.. I am not subscribed..
--
Please send your messages pgp-signed and/or pgp-encrypted (don't encrypt mails
to mailing list!). If you don't know what pgp is visit www.gnupg.org.
(public pgp key: ftp.schottelius.org/pub/familiy/nico/pgp-key)
[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: IPSEC
2003-07-08 12:40 IPSEC Nico Schottelius
@ 2003-07-08 22:19 ` Dax Kelson
0 siblings, 0 replies; 4+ messages in thread
From: Dax Kelson @ 2003-07-08 22:19 UTC (permalink / raw)
To: Nico Schottelius; +Cc: Linux Kernel Mailing List
On Tue, 2003-07-08 at 06:40, Nico Schottelius wrote:
> Hello!
>
> I opened an overview about Linux IPSec implementations at
> http://linux.schottelius.org/ipsec/
> I would like to add recent kernel changes in IPSec to the site.
> So it would be very nice if someone could forward
> latest IPSec news to nico-ipsec@schottelius.org..do you think this is possible?
The FreeSWAN/SuperFreeSWAN userland (IKE daemon, etc) has been ported to
work with the 2.5 kernel IPSec code.
Also, the 2.5 kernel IPSec code has been back ported to the 2.4 kernel
by David Miller (more??). It's in the Red Hat Linux rawhide kernel RPMs.
Dax Kelson
Guru Labs
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2003-07-08 22:05 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2003-01-10 22:45 IPSec latten
2003-01-11 0:21 ` IPSec James Morris
2003-07-08 12:40 IPSEC Nico Schottelius
2003-07-08 22:19 ` IPSEC Dax Kelson
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).